Is github.com/open-policy-agent/opa-envoy-plugin safe to use?

github.com/open-policy-agent/opa-envoy-plugin has 2 known vulnerabilities on the latest version (v0.46.1). DepScope rates its health at 43/100 (high risk).

What is the latest version of github.com/open-policy-agent/opa-envoy-plugin?

The latest version of github.com/open-policy-agent/opa-envoy-plugin is v0.46.1, released 2022-11-03.

Does github.com/open-policy-agent/opa-envoy-plugin have known vulnerabilities?

Yes. github.com/open-policy-agent/opa-envoy-plugin has 2 known vulnerabilities. See depscope.dev/pkg/go/github.com/open-policy-agent/opa-envoy-plugin for details.

Is github.com/open-policy-agent/opa-envoy-plugin deprecated?

No, github.com/open-policy-agent/opa-envoy-plugin is actively maintained. Latest release: v0.46.1 (2022-11-03).

What are alternatives to github.com/open-policy-agent/opa-envoy-plugin?

DepScope has no curated alternatives for github.com/open-policy-agent/opa-envoy-plugin at this time.

What license does github.com/open-policy-agent/opa-envoy-plugin use?

github.com/open-policy-agent/opa-envoy-plugin is licensed under Apache-2.0.

github.com/open-policy-agent/opa-envoy-plugin

govv0.46.1

A plugin to enforce OPA policies with Envoy

License Apache-2.0permissive134 versions62 maintainers0 deps355 weekly dl

open-policy-agent/opa-envoy-plugin

/ 100

Health

update required

github.com/open-policy-agent/[email protected] has vulnerabilities — update to latest

Update to >= 1.13.2-envoy-2 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

3/20

popularity

20/25

security

15/15

maturity

5/15

community

Vulnerabilities

1 high1 low

Advisories (2)

Severity	ID	Summary	Fixed in
high	CVE-2026-26205	opa-envoy-plugin has an Authorization Bypass via Double-Slash Path Misinterpretation in input.parsed_path	1.13.2-envoy-2
unknown	CVE-2026-26205	opa-envoy-plugin has an Authorization Bypass via Double-Slash Path Misinterpretation in input.parsed_path in github.com/open-policy-agent/opa-envoy-plugin	1.13.2-envoy-2

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/open-policy-agent/opa-envoy-plugin

Last updated · 2022-11-03T09:39:30Z